Known vulnerabilities in fontforge

Vendor: SUSE
Software: fontforge
Software CPE: cpe:2.3:o:suse:fontforge:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting fontforge fontforge is affected by 4 known vulnerabilities: 3 high, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121102 - Heap-based Buffer Overflow
CVE-2025-15275		 CWE-122 High
No
No
 20200314-150200.3.18.1 08.01.2026 SB2026010831
SB2026012758
SB2026020573
and 7 more
#VU121100 - Use After Free
CVE-2025-15269		 CWE-416 High
No
No
 20200314-150200.3.18.1 08.01.2026 SB2026010831
SB2026012758
SB2026020573
and 7 more
#VU121096 - Heap-based Buffer Overflow
CVE-2025-15279		 CWE-122 High
No
No
 20200314-150200.3.18.1 08.01.2026 SB2026010831
SB2026012758
SB2026020573
and 7 more
#VU117704 - Missing release of memory after effective lifetime
CVE-2025-50949		 CWE-401 Low
No
No
 20200314-150200.3.12.1 28.10.2025 SB2025102850
SB2025102852
SB2025102853
and 10 more